Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa
File: 323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa (raw, json)
Hash identifier: 6CBdoJOj6CGEDHLZiuQjRz0heStp+V9CJ4WqVH5lEvA=
Subject key identifier: EF:71:5A:2D:7B:49:32:F5:CA:27:85:4A:B7:6B:35:BF:B3:F1:93:4A
Certificate issuer: /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial: 0840863191168521A24315789CCF3A388A4B4120
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa
Signing time: Tue 02 Jul 2024 18:08:56 +0000
ROA not before: Tue 02 Jul 2024 18:03:56 +0000
ROA not after: Tue 01 Jul 2025 18:08:56 +0000
asID: 265419
IP address blocks: 2804:33d4:b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Oct 2024 17:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:40:86:31:91:16:85:21:a2:43:15:78:9c:cf:3a:38:8a:4b:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Validity
Not Before: Jul 2 18:03:56 2024 GMT
Not After : Jul 1 18:08:56 2025 GMT
Subject: CN=EF715A2D7B4932F5CA27854AB76B35BFB3F1934A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:25:0b:cb:2c:d8:62:a7:e3:b8:39:b1:44:
4a:48:b6:fa:b7:7f:32:f2:13:d4:64:cb:c6:9a:af:
8e:1b:3c:ae:18:6b:91:95:7b:ec:fb:a3:98:8b:66:
2e:c9:ba:ca:09:ea:74:81:48:92:21:d3:cd:9b:5e:
e5:3d:15:b9:8e:a5:6c:88:77:d9:c5:81:1b:68:61:
aa:34:13:6f:cd:4f:03:bc:ed:f2:07:52:e2:e1:5f:
0a:ab:d5:cf:b4:87:53:39:4c:f7:7c:27:04:69:4b:
9c:5f:d6:2d:25:ca:44:1f:4e:16:09:0d:17:64:6a:
8b:b3:e0:e3:89:a0:22:37:9d:f0:c5:44:46:8a:a7:
da:5d:5c:db:89:3d:3e:f5:56:0d:59:a5:58:be:66:
6a:76:c4:47:32:78:3c:61:32:7f:0d:86:5d:f3:67:
4b:24:8e:1d:6a:74:04:11:30:21:fe:20:fa:ab:08:
b6:bc:f2:07:8a:c9:0b:1b:b6:dd:82:6a:77:9a:50:
11:84:c5:b5:4c:da:19:52:37:20:bd:bb:ae:be:c1:
98:01:27:14:8a:23:00:77:ba:ec:fc:fc:a0:89:04:
e0:6d:53:c6:84:48:56:be:ad:80:91:bc:f7:14:ab:
d8:da:4e:db:da:0d:d3:39:02:d1:33:02:20:63:1b:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:71:5A:2D:7B:49:32:F5:CA:27:85:4A:B7:6B:35:BF:B3:F1:93:4A
X509v3 Authority Key Identifier:
keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33d4:b::/48
Signature Algorithm: sha256WithRSAEncryption
e3:7b:ef:06:eb:6a:5f:b9:24:ac:c8:e7:c3:b4:d8:e1:a2:d7:
fd:29:d0:b4:2a:42:c5:94:37:4a:d1:58:d6:fc:55:e4:3a:1c:
b3:49:ad:5a:39:33:d4:8d:7f:be:b3:4c:bc:9a:e4:18:7b:6c:
42:0f:cd:b5:b8:bb:fb:f8:c8:40:34:be:0c:bf:0f:8a:9e:94:
9a:cb:51:f1:92:8d:d2:1c:32:36:1e:eb:8a:23:53:da:d1:3b:
09:8e:c2:93:74:59:74:f7:67:95:07:54:16:c0:54:e6:1f:4a:
98:ed:68:1d:d3:1f:0e:fe:7f:0b:0a:d6:41:c6:d4:ba:b6:33:
e6:8c:c8:d6:af:91:5f:70:33:e9:d6:26:7b:53:44:16:24:1f:
29:ca:90:63:39:3d:6f:0f:af:4c:fa:5a:a2:06:80:4f:dc:f5:
56:4e:8d:99:4a:b2:01:37:b1:3c:cd:a6:51:d3:0b:76:8b:15:
bb:5a:ec:c1:96:02:05:9c:9d:fb:19:a2:2f:ad:26:7d:a6:6b:
c5:f5:50:e6:16:03:62:71:f9:89:38:e5:5c:75:12:68:da:04:
d0:8e:6b:f8:e3:a3:72:f9:b0:2b:66:83:10:f0:05:eb:38:d9:
98:71:10:c8:a6:7f:2f:9e:46:fc:bd:35:25:33:d4:b8:34:23:
63:32:37:32
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUCECGMZEWhSGiQxV4nM86OIpLQSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNEM0EzMzZCRjRDODE0MjBFREMxRDRDQjQ5NEQ4NEQz
NzE0RTEzQTAeFw0yNDA3MDIxODAzNTZaFw0yNTA3MDExODA4NTZaMDMxMTAvBgNV
BAMTKEVGNzE1QTJEN0I0OTMyRjVDQTI3ODU0QUI3NkIzNUJGQjNGMTkzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXiULyyzYYqfjuDmxREpItvq3
fzLyE9Rky8aar44bPK4Ya5GVe+z7o5iLZi7JusoJ6nSBSJIh082bXuU9FbmOpWyI
d9nFgRtoYao0E2/NTwO87fIHUuLhXwqr1c+0h1M5TPd8JwRpS5xf1i0lykQfThYJ
DRdkaouz4OOJoCI3nfDFREaKp9pdXNuJPT71Vg1ZpVi+Zmp2xEcyeDxhMn8Nhl3z
Z0skjh1qdAQRMCH+IPqrCLa88geKyQsbtt2CaneaUBGExbVM2hlSNyC9u66+wZgB
JxSKIwB3uuz8/KCJBOBtU8aESFa+rYCRvPcUq9jaTtvaDdM5AtEzAiBjG/GTAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU73FaLXtJMvXKJ4VKt2s1v7Pxk0owHwYDVR0j
BBgwFoAUw9OjNr9MgUIO3B1MtJTYTTcU4TowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC9DM0QzQTMzNkJGNEM4MTQyMEVEQzFENENCNDk0RDg0RDM3MTRFMTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRDNBMzM2QkY0QzgxNDIw
RURDMUQ0Q0I0OTREODREMzcxNEUxM0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv
MzIzODMwMzQzYTMzMzM2NDM0M2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEM9QACzANBgkqhkiG9w0BAQsFAAOCAQEA
43vvButqX7kkrMjnw7TY4aLX/SnQtCpCxZQ3StFY1vxV5Docs0mtWjkz1I1/vrNM
vJrkGHtsQg/Ntbi7+/jIQDS+DL8Pip6UmstR8ZKN0hwyNh7riiNT2tE7CY7Ck3RZ
dPdnlQdUFsBU5h9KmO1oHdMfDv5/CwrWQcbUurYz5ozI1q+RX3Az6dYme1NEFiQf
KcqQYzk9bw+vTPpaogaAT9z1Vk6NmUqyATexPM2mUdMLdosVu1rswZYCBZyd+xmi
L60mfaZrxfVQ5hYDYnH5iTjlXHUSaNoE0I5r+OOjcvmwK2aDEPAF6zjZmHEQyKZ/
L55G/L01JTPUuDQjYzI3Mg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:25 2025 by rpki-client